What it does

• Shows the resolution path from root to authoritative servers
• Makes DNSSEC signals visible where they are relevant
• Keeps a lightweight view of common record changes (best-effort)

What it doesn’t

• It is not a monitoring or alerting service
• It does not promise completeness, uptime, or coverage
• It does not enforce, block, or protect anything